Privacy policy

Who we are

CartLift: Volume Discounts (“CartLift”) is a Shopify app developed and operated by PINETECH IT SOLUTIONS PRIVATE LIMITED (Pinetech ITS) under the Coderbunch brand. This policy describes how data is handled when a merchant installs the app and when shoppers interact with promotional discounts on an active store.

Zero Personal Shopper Data Collection

CartLift: Volume Discounts operates on a serverless, zero-cloud architecture powered directly by Shopify Functions (WebAssembly). Our app calculates discounts natively inside Shopify’s checkout engine.

• We do not collect, harvest, store, or sell any customer personal identifiable information (PII).
• We do not track buyer browsing history, IP addresses, email addresses, or payment card details.
• We do not use tracking cookies or storefront tracking pixels.
• The storefront tier table only reads the variant price and updates the quantity selector within the shopper's local browser session.

Information from merchants

When you install CartLift, Shopify provides standard authentication tokens so the app can render its management interface inside your Shopify admin panel:

• Store Identity: Your myshopify.com domain and staff account language preferences for interface localization.
• App Configurations: Your discount rules (quantity tiers, discount percentages or fixed dollar amounts, eligible product IDs, and display badge text) are stored directly within your store's native Shopify Metafields (under the $app:volume-discount namespace).

Shopify API Access Scopes

The app requests the minimum necessary permissions required to operate:

• write_discounts: Needed to create, update, and activate the automatic discount function within Shopify checkout.
• read_products: Needed to allow merchants to search and attach specific discount tiers to eligible catalog items within the admin interface.

Infrastructure & Providers

Discount calculations run 100% on Shopify's internal WebAssembly infrastructure at checkout. We do not maintain any external database storing customer records or sales transactions.

Retention and Deletion (GDPR & CCPA Compliance)

We strictly comply with Shopify's mandatory data privacy webhooks:

• Customer Data Request: Because we do not store customer records, no personal customer data exists to retrieve.
• Customer Data Erasure: No shopper data is retained.
• Shop Redact: When a store uninstalls the app, session records are immediately purged from our application storage, and all remaining store records are wiped upon receipt of Shopify’s mandatory shop redact webhook (within 48 hours).

Your choices and requests

Merchants can disable or delete discount rules at any time directly through the app interface or Shopify Admin. To submit privacy inquiries or request verification of data deletion, please contact us at hello@pinetechits.com.

Changes to this policy

We may update this policy periodically to reflect enhancements in the app or changes in Shopify platform requirements. Any updates will be posted here with an updated effective date.